• The Journal of Society for e-Business Studies
• /
• v.6 no.3
• /
• pp.101-113
• /
• 2001

Security is very important in EC(Electronic Commerce) environment because exchanged information(that is transaction details, private data, charges data(card-no, accounts), etc) is various and is very sensitive. So, In this paper, we propose Secure-ReXpis(Reliable St excellent Xh3 Processing Infrastructure) System that transfer message and support Message Level Security(Encryption/Decryption and Digital Signature). And we implement Message Confidentiality Service, User Authentication ＆ Message Integrity Service and Non-Repudiation Service among the various Security Services. This system support XML message format and EDI message, WEB Data and Private Format Data, etc.

• Proceedings of the Korea Institutes of Information Security and Cryptology Conference
• /
• 2003.12a
• /
• pp.324-329
• /
• 2003

Single Sign-On(SSO)은 사용자가 단 한번의 인증으로 분산된 시스템에서 제공하는 다른 서비스에 로그인하는 것을 가능하게 하는 보안 특징이다. SAML은 서로 다른 entity들 사이에서 인증, 권한 그리고 profile 정보의 교환을 가능하게 하는 XML기반의 SSO표준이다. 이러한 표준은 분산 환경에서 서로 다른 보안 서비스들 사이에 상호운용성을 제공한다. 본 논문에서는 SAML APIs로 구성된 자바 기반의 SSO library를 설계 및 구현하고 SAML APIs를 검증하기 위해 분산 application의 prototype을 구성하였다. 개발된 library에서 무결성, 부인방지, 그리고 기밀성 같은 보안고려사항들을 XML기반의 서명과 암호화를 적용하여 보장한다.

• Journal of KIISE:Databases
• /
• v.35 no.1
• /
• pp.29-43
• /
• 2008

Although RDF ontologies might be expressed in XML tree model, existing methods for protection of XML documents are not suitable for securing RDF ontologies. The graph style and inference feature of RDF demands a new security model development. Driven by this goal, this paper proposes a new query-oriented model for the RDF ontology access control. The proposed model rewrites a user query using a three-layered ontology view. The proposal resolves the problem that the existing approaches should generate inference models depending on inference rules. Accessible ontology concepts and instances which a user can visit are defined as ontology views, and the inference view defined for controling an inference query enables a controlled inference capability for the user. This paper defines the three-layered view and describes algorithms for query rewriting according to the views. An implemented prototype with its system architecture is shown. Finally, the experiment and comparative evaluation result of the proposal and the previous approach is described.

• Journal of Korea Multimedia Society
• /
• v.8 no.7
• /
• pp.869-881
• /
• 2005

XML(eXtensible Markup Language) has emerged as a prevalent standard for document representation and exchange on the Internet. XML documents contain information of different sensitivity degrees, so that XML Document must selectively shared by user communities. There is thus the need for models and mechanisms enabling the specification and enforcement of access control policies for XML documents. Mechanisms are also required enabling a secure and selective dissemination of documents to users, according to the authorizations which the users have. In this paper, we give an account of access control model and mechanisms, which XML documents can be securely protected in web environments. We make RBAC Based access Control polices to the problem of secure and selective access of XML documents. The proposed model and mechanism guarantee that the secure use for XML documents through definition of authority for element, attribute, link within XML document as well as XML document.

• The Journal of Information Systems
• /
• v.10 no.1
• /
• pp.127-146
• /
• 2001

The area of business applications in the internet are extended enormously in result of fast development of computing and communication technologies, increase of internet use, and use of intranet/extranet in enterprise information system. Widely spread the use of the internet, there are various applications for Business to Business (B to B) or Business to Customer(B to C) model that are based on the intranet or extranet. This paper designed and implemented the Web-based Electronic Bidding System for Business to Business (B to B) model. The technical issues of electronic bidding system in the internet are involved in the connection between web client and server, electronic data interchange for the contract document, and security solution during the bidding and contracting processes. The web-based electronic bidding system in this paper is implemented using Java applet and servlet as a connection interface for web client and server, XML/EDI-based documents for a bid and a contract, and bidding server and notary server for enhancing the security using PKI(Public Key Infrastructure)-based public key cryptography, digital signature and Certification Authority(CA).

• Proceedings of the Korean Information Science Society Conference
• /
• 2003.10a
• /
• pp.778-780
• /
• 2003

웹서비스는 최근 들어 e-business에서 가장 주목받고 있는 신기술이다. 웹서비스는 기존 웹 기반의 디스플레이에 그쳤던 단순정보 교환을 애플리케이션 차원에서 데이터를 통신할 수 있어 개발 가능성이 무한한 프레임 워크로 각광받고 있다. 그러나 보안에 취약성을 가지고 있어 웹서비스의 도입과 활성화가 되지 못하고 있는 실정이다. 따라서 본 논문에서는 웹서비스에서 통신에 있어 반드시 지켜져야 할 메시지 무결성, 기밀성, 부인 방지 등의 신뢰성 보장 기법이 어떻게 적용될 수 있는지를 살펴보고, XML 기반의 보안 기술 및 적용 분야 분석을 통해 웹서비스에서의 확장성 및 상호운용성을 보장하는 보안 취약성 해결책을 제시한다.

• Proceedings of the Korea Institutes of Information Security and Cryptology Conference
• /
• 2003.12a
• /
• pp.307-310
• /
• 2003

웹서비스에 대한 높은 관심과 함께 그 실현이 점차 가시화되고 XML로 이루어진 지원 기술들의 전폭적인 지지로 잠재력은 더욱 확대되고 있다. 웹서비스는 기존 웹 기반의 디스플레이에 그쳤던 단순정보 교환을 애플리케이션 차원에서 데이터를 통신할 수 있어 개발 가능성이 무한한 프레임워크로 각광받고 있다. 그러나 현재 자원 관리에서의 효율성 문제가 드러나게 되었고 인증분야와의 접목에서도 한계를 드러내고 있다. XACML은 리소스에 대한 미세한 접근제어를 할 수 있는 XML기반의 언어이다. 접근하려는 리소스는 XML을 사용하여 표현되는 어떠한 객체도 될 수 있으며 XPath나 LDAP과 같은 프로토콜과 함께 바인딩하여 사용될 수도 있다. 보다 효율적인 접근 제어를 위하여 XACML 적용 모델을 연구하였다.

• Journal of KIISE:Databases
• /
• v.32 no.2
• /
• pp.193-203
• /
• 2005

XML (extensible Markup Language) is recognized as a standard of data representation and transmission on Internet. XPath is a standard for specifying parts of XML documents anda suitable language for both query processing and access control of XML. In this paper, we use the XPath expression for representing user queries and access control for XML. And we propose an access control method for XML, where we control accesses to XML documents by filtering query XPath expressions through access control XPath expressions. In the proposed method, we directly search XACT (XML Access Control Tree) for a query XPath expression and extract the access-granted parts. The XACT is our proposedstructure, where the edges are structural summary of XML elements and the nodes contain access-control information. We show the query XPath expressions are successfully filtered through the XACT by our proposed method, and also show the performance improvement by comparing the proposed method with the previous work.

• Proceedings of the CALSEC Conference
• /
• 2001.08a
• /
• pp.165-176
• /
• 2001

* Extension of EC(Electronic Commerce) * Standard of Message -EDI : UN/EDIFACT, ANSI X12, etc -XML : ebXML, CML, MathML, WIDL, etc * Various of Information -Business Transaction Data -Private Data : ID, Password, Personal Information -Charge Data : Accounts, Card, etc * Message Level Security(omitted)

• Proceedings of the IEEK Conference
• /
• 2001.06a
• /
• pp.149-152
• /
• 2001

In general, the wireless services based on markup language and provided with wired network requires dedicated gateway system. But in this case, the serious problems such as security vulnerabilities, damage of contents are occurred to the application. In this paper, to improve above problems, we designed and implemented the new application named "Interacted Wired St Wireless Student Information System" using J2ME(Java 2 Micro Edition) platform and XML(eXtensible Markup Language) to transmit user data safely and support the system extendibility maintaining data format consistency respectively.pectively.